I think you've seen this, but in case you haven't, does any of this help?
http://java.sun.com/j2se/1.5.0/docs/guide/security/jgss/tutorials/Troubleshooting.html

-Scott

On 1/3/07, Geoffrey Ritchey <[EMAIL PROTECTED]> wrote:





I'm experimenting with JAAS authentication on Tomcat using Kerberos in
Windows.  For most people it works!  For one person so far I get the
following exception:



javax.security.auth.login.LoginException: KDC has no support for
encryption type (14)



She has a brand new Windows machine.



I've seen something about setting a registry value but I'm not sure what
is meant; on the tomcat server or on the individual's machine.  Setting a
registry value doesn't seem like a great solution to me.



The heart of the code that runs as a tomcat service is this:



            LoginContext lc = *null*;



            *try* {

                  String home = System.*getenv*("CATALINA_HOME");

                  System.*setProperty*("java.security.auth.login.config",
home + "/conf/jaas.conf");

                  System.*setProperty*("java.security.krb5.conf", home +
"/conf/krb5.conf");



                lc = *new* LoginContext("JaasSample", *this*);

                lc.login();

            } *catch* (LoginException le) {

                  le.printStackTrace();

                *return*;

            } *catch* (SecurityException se) {

                  se.printStackTrace();

                *return*;

            }





Does anyone have any knowledge of this?  I should probably set the system
properties once at startup but I don't think that has anything to do with
the problem at hand.











_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas



_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas

Reply via email to